Overview
Brought to you by YData
Dataset statistics
| Number of variables | 15 |
|---|---|
| Number of observations | 10000 |
| Missing cells | 0 |
| Missing cells (%) | 0.0% |
| Duplicate rows | 0 |
| Duplicate rows (%) | 0.0% |
| Total size in memory | 9.3 MiB |
| Average record size in memory | 979.4 B |
Variable types
| Categorical | 5 |
|---|---|
| Text | 7 |
| Numeric | 3 |
syscheck.size_after is highly overall correlated with syscheck.size_before | High correlation |
syscheck.size_before is highly overall correlated with syscheck.size_after | High correlation |
Reproduction
| Analysis started | 2025-06-01 06:10:09.096369 |
|---|---|
| Analysis finished | 2025-06-01 06:10:14.095358 |
| Duration | 5 seconds |
| Software version | ydata-profiling vv4.16.1 |
| Download configuration | config.json |
Variables
syscheck.event
Categorical
| Distinct | 3 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 622.0 KiB |
| modified | |
|---|---|
| deleted | |
| added |
Length
| Max length | 8 |
|---|---|
| Median length | 7 |
| Mean length | 6.6768 |
| Min length | 5 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | modified |
|---|---|
| 2nd row | deleted |
| 3rd row | deleted |
| 4th row | added |
| 5th row | modified |
Common Values
| Value | Count | Frequency (%) |
| modified | 3360 | |
| deleted | 3344 | |
| added | 3296 |
Length
Histogram of lengths of the category
Common Values (Plot)
| Value | Count | Frequency (%) |
| modified | 3360 | |
| deleted | 3344 | |
| added | 3296 |
Most occurring characters
| Value | Count | Frequency (%) |
| d | 23296 | |
| e | 16688 | |
| i | 6720 | 10.1% |
| m | 3360 | 5.0% |
| o | 3360 | 5.0% |
| f | 3360 | 5.0% |
| l | 3344 | 5.0% |
| t | 3344 | 5.0% |
| a | 3296 | 4.9% |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 66768 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| d | 23296 | |
| e | 16688 | |
| i | 6720 | 10.1% |
| m | 3360 | 5.0% |
| o | 3360 | 5.0% |
| f | 3360 | 5.0% |
| l | 3344 | 5.0% |
| t | 3344 | 5.0% |
| a | 3296 | 4.9% |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 66768 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| d | 23296 | |
| e | 16688 | |
| i | 6720 | 10.1% |
| m | 3360 | 5.0% |
| o | 3360 | 5.0% |
| f | 3360 | 5.0% |
| l | 3344 | 5.0% |
| t | 3344 | 5.0% |
| a | 3296 | 4.9% |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 66768 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| d | 23296 | |
| e | 16688 | |
| i | 6720 | 10.1% |
| m | 3360 | 5.0% |
| o | 3360 | 5.0% |
| f | 3360 | 5.0% |
| l | 3344 | 5.0% |
| t | 3344 | 5.0% |
| a | 3296 | 4.9% |
syscheck.path
Text
| Distinct | 9536 |
|---|---|
| Distinct (%) | 95.4% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 837.2 KiB |
Length
| Max length | 45 |
|---|---|
| Median length | 37 |
| Mean length | 28.7177 |
| Min length | 13 |
Unique
| Unique | 9089 ? |
|---|---|
| Unique (%) | 90.9% |
Sample
| 1st row | E:\Data\resource.pdf |
|---|---|
| 2nd row | D:\Work\three.bat |
| 3rd row | C:\Users\Project\Documents\success.jpg |
| 4th row | D:\Work\career.dll |
| 5th row | C:\Windows\Temp\field.bat |
| Value | Count | Frequency (%) |
| c:\windows\system32\policy.pptx | 3 | < 0.1% |
| c:\users\public\videos\think.xlsx | 3 | < 0.1% |
| c:\programdata\choose.jpg | 3 | < 0.1% |
| c:\users\user2\desktop\nice.bat | 3 | < 0.1% |
| c:\users\project\documents\market.dll | 3 | < 0.1% |
| c:\users\public\videos\morning.xlsx | 3 | < 0.1% |
| c:\users\guest\documents\more.jpg | 3 | < 0.1% |
| c:\windows\temp\five.pptx | 3 | < 0.1% |
| c:\windows\system32\add.bat | 3 | < 0.1% |
| c:\users\public\videos\car.pptx | 3 | < 0.1% |
| Other values (9526) | 9970 |
Most occurring characters
| Value | Count | Frequency (%) |
| \ | 31914 | 11.1% |
| s | 25735 | 9.0% |
| e | 24027 | 8.4% |
| t | 15914 | 5.5% |
| o | 15825 | 5.5% |
| r | 15357 | 5.3% |
| a | 11244 | 3.9% |
| : | 10000 | 3.5% |
| . | 10000 | 3.5% |
| i | 8739 | 3.0% |
| Other values (36) | 118422 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 287177 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| \ | 31914 | 11.1% |
| s | 25735 | 9.0% |
| e | 24027 | 8.4% |
| t | 15914 | 5.5% |
| o | 15825 | 5.5% |
| r | 15357 | 5.3% |
| a | 11244 | 3.9% |
| : | 10000 | 3.5% |
| . | 10000 | 3.5% |
| i | 8739 | 3.0% |
| Other values (36) | 118422 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 287177 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| \ | 31914 | 11.1% |
| s | 25735 | 9.0% |
| e | 24027 | 8.4% |
| t | 15914 | 5.5% |
| o | 15825 | 5.5% |
| r | 15357 | 5.3% |
| a | 11244 | 3.9% |
| : | 10000 | 3.5% |
| . | 10000 | 3.5% |
| i | 8739 | 3.0% |
| Other values (36) | 118422 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 287177 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| \ | 31914 | 11.1% |
| s | 25735 | 9.0% |
| e | 24027 | 8.4% |
| t | 15914 | 5.5% |
| o | 15825 | 5.5% |
| r | 15357 | 5.3% |
| a | 11244 | 3.9% |
| : | 10000 | 3.5% |
| . | 10000 | 3.5% |
| i | 8739 | 3.0% |
| Other values (36) | 118422 |
| Distinct | 510 |
|---|---|
| Distinct (%) | 5.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 732.9 KiB |
Length
| Max length | 27 |
|---|---|
| Median length | 22 |
| Mean length | 18.0312 |
| Min length | 9 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | read,write,hidden,system |
|---|---|
| 2nd row | exec,archive,write |
| 3rd row | archive,read |
| 4th row | hidden,archive |
| 5th row | system,read,hidden |
| Value | Count | Frequency (%) |
| exec,archive | 131 | 1.3% |
| system,archive | 131 | 1.3% |
| exec,system | 128 | 1.3% |
| read,write | 124 | 1.2% |
| read,hidden | 122 | 1.2% |
| archive,system | 121 | 1.2% |
| exec,hidden | 119 | 1.2% |
| write,exec | 119 | 1.2% |
| system,write | 118 | 1.2% |
| hidden,archive | 117 | 1.2% |
| Other values (500) | 8770 |
Most occurring characters
| Value | Count | Frequency (%) |
| e | 35098 | |
| , | 20055 | |
| r | 15012 | |
| i | 14954 | |
| d | 14953 | |
| s | 10070 | 5.6% |
| c | 10067 | 5.6% |
| a | 10047 | 5.6% |
| t | 10000 | 5.5% |
| h | 9989 | 5.5% |
| Other values (6) | 30067 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 180312 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| e | 35098 | |
| , | 20055 | |
| r | 15012 | |
| i | 14954 | |
| d | 14953 | |
| s | 10070 | 5.6% |
| c | 10067 | 5.6% |
| a | 10047 | 5.6% |
| t | 10000 | 5.5% |
| h | 9989 | 5.5% |
| Other values (6) | 30067 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 180312 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| e | 35098 | |
| , | 20055 | |
| r | 15012 | |
| i | 14954 | |
| d | 14953 | |
| s | 10070 | 5.6% |
| c | 10067 | 5.6% |
| a | 10047 | 5.6% |
| t | 10000 | 5.5% |
| h | 9989 | 5.5% |
| Other values (6) | 30067 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 180312 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| e | 35098 | |
| , | 20055 | |
| r | 15012 | |
| i | 14954 | |
| d | 14953 | |
| s | 10070 | 5.6% |
| c | 10067 | 5.6% |
| a | 10047 | 5.6% |
| t | 10000 | 5.5% |
| h | 9989 | 5.5% |
| Other values (6) | 30067 |
syscheck.changed_attributes
Categorical
| Distinct | 25 |
|---|---|
| Distinct (%) | 0.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 628.7 KiB |
| mode | |
|---|---|
| mtime | |
| group | |
| size | |
| owner | |
| Other values (20) |
Length
| Max length | 11 |
|---|---|
| Median length | 10 |
| Mean length | 7.3675 |
| Min length | 4 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | owner,mode |
|---|---|
| 2nd row | mode,size |
| 3rd row | group |
| 4th row | mtime |
| 5th row | mode |
Common Values
| Value | Count | Frequency (%) |
| mode | 1057 | 10.6% |
| mtime | 1041 | 10.4% |
| group | 1028 | 10.3% |
| size | 994 | 9.9% |
| owner | 937 | 9.4% |
| mode,owner | 281 | 2.8% |
| owner,mode | 267 | 2.7% |
| group,size | 264 | 2.6% |
| mtime,size | 261 | 2.6% |
| group,mode | 261 | 2.6% |
| Other values (15) | 3609 |
Length
Histogram of lengths of the category
| Value | Count | Frequency (%) |
| mode | 1057 | 10.6% |
| mtime | 1041 | 10.4% |
| group | 1028 | 10.3% |
| size | 994 | 9.9% |
| owner | 937 | 9.4% |
| mode,owner | 281 | 2.8% |
| owner,mode | 267 | 2.7% |
| group,size | 264 | 2.6% |
| mtime,size | 261 | 2.6% |
| group,mode | 261 | 2.6% |
| Other values (15) | 3609 |
Most occurring characters
| Value | Count | Frequency (%) |
| e | 11924 | |
| m | 9079 | |
| o | 8985 | |
| i | 5958 | |
| r | 5942 | |
| , | 4943 | 6.7% |
| d | 3043 | 4.1% |
| p | 3019 | 4.1% |
| g | 3019 | 4.1% |
| u | 3019 | 4.1% |
| Other values (5) | 14744 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 73675 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| e | 11924 | |
| m | 9079 | |
| o | 8985 | |
| i | 5958 | |
| r | 5942 | |
| , | 4943 | 6.7% |
| d | 3043 | 4.1% |
| p | 3019 | 4.1% |
| g | 3019 | 4.1% |
| u | 3019 | 4.1% |
| Other values (5) | 14744 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 73675 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| e | 11924 | |
| m | 9079 | |
| o | 8985 | |
| i | 5958 | |
| r | 5942 | |
| , | 4943 | 6.7% |
| d | 3043 | 4.1% |
| p | 3019 | 4.1% |
| g | 3019 | 4.1% |
| u | 3019 | 4.1% |
| Other values (5) | 14744 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 73675 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| e | 11924 | |
| m | 9079 | |
| o | 8985 | |
| i | 5958 | |
| r | 5942 | |
| , | 4943 | 6.7% |
| d | 3043 | 4.1% |
| p | 3019 | 4.1% |
| g | 3019 | 4.1% |
| u | 3019 | 4.1% |
| Other values (5) | 14744 |
syscheck.size_before
Real number (ℝ)
High correlation 
| Distinct | 9971 |
|---|---|
| Distinct (%) | 99.7% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 994645.31 |
| Minimum | 114 |
|---|---|
| Maximum | 1999357 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Negative | 0 |
| Negative (%) | 0.0% |
| Memory size | 78.3 KiB |
Quantile statistics
| Minimum | 114 |
|---|---|
| 5-th percentile | 96616.35 |
| Q1 | 495411.5 |
| median | 990035 |
| Q3 | 1495918.5 |
| 95-th percentile | 1893454.2 |
| Maximum | 1999357 |
| Range | 1999243 |
| Interquartile range (IQR) | 1000507 |
Descriptive statistics
| Standard deviation | 577682.05 |
|---|---|
| Coefficient of variation (CV) | 0.58079201 |
| Kurtosis | -1.2046663 |
| Mean | 994645.31 |
| Median Absolute Deviation (MAD) | 499493 |
| Skewness | 0.0071674874 |
| Sum | 9.9464531 × 109 |
| Variance | 3.3371655 × 1011 |
| Monotonicity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) |
| 1560817 | 2 | < 0.1% |
| 641137 | 2 | < 0.1% |
| 1889340 | 2 | < 0.1% |
| 1887353 | 2 | < 0.1% |
| 1216565 | 2 | < 0.1% |
| 1376923 | 2 | < 0.1% |
| 40517 | 2 | < 0.1% |
| 301311 | 2 | < 0.1% |
| 1776853 | 2 | < 0.1% |
| 1710603 | 2 | < 0.1% |
| Other values (9961) | 9980 |
| Value | Count | Frequency (%) |
| 114 | 1 | |
| 439 | 1 | |
| 492 | 1 | |
| 498 | 1 | |
| 552 | 1 | |
| 976 | 1 | |
| 1012 | 1 | |
| 1506 | 1 | |
| 1730 | 1 | |
| 2142 | 1 |
| Value | Count | Frequency (%) |
| 1999357 | 1 | |
| 1998265 | 1 | |
| 1998126 | 1 | |
| 1997906 | 1 | |
| 1997711 | 1 | |
| 1997541 | 1 | |
| 1997534 | 1 | |
| 1997330 | 1 | |
| 1997181 | 1 | |
| 1996819 | 1 |
syscheck.size_after
Real number (ℝ)
High correlation 
| Distinct | 9358 |
|---|---|
| Distinct (%) | 93.6% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 1005282.4 |
| Minimum | 1 |
|---|---|
| Maximum | 2486304 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Negative | 0 |
| Negative (%) | 0.0% |
| Memory size | 78.3 KiB |
Quantile statistics
| Minimum | 1 |
|---|---|
| 5-th percentile | 1 |
| Q1 | 489323 |
| median | 1002104.5 |
| Q3 | 1500248.8 |
| 95-th percentile | 2038771.4 |
| Maximum | 2486304 |
| Range | 2486303 |
| Interquartile range (IQR) | 1010925.8 |
Descriptive statistics
| Standard deviation | 626674.75 |
|---|---|
| Coefficient of variation (CV) | 0.62338182 |
| Kurtosis | -0.97210074 |
| Mean | 1005282.4 |
| Median Absolute Deviation (MAD) | 504644 |
| Skewness | 0.10856673 |
| Sum | 1.0052824 × 1010 |
| Variance | 3.9272125 × 1011 |
| Monotonicity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) |
| 1 | 627 | 6.3% |
| 1627014 | 2 | < 0.1% |
| 496540 | 2 | < 0.1% |
| 599310 | 2 | < 0.1% |
| 289095 | 2 | < 0.1% |
| 956870 | 2 | < 0.1% |
| 917770 | 2 | < 0.1% |
| 229628 | 2 | < 0.1% |
| 2014090 | 2 | < 0.1% |
| 914011 | 2 | < 0.1% |
| Other values (9348) | 9355 |
| Value | Count | Frequency (%) |
| 1 | 627 | |
| 241 | 1 | < 0.1% |
| 333 | 1 | < 0.1% |
| 864 | 1 | < 0.1% |
| 1057 | 1 | < 0.1% |
| 2167 | 1 | < 0.1% |
| 2427 | 1 | < 0.1% |
| 3739 | 1 | < 0.1% |
| 4159 | 1 | < 0.1% |
| 4527 | 1 | < 0.1% |
| Value | Count | Frequency (%) |
| 2486304 | 1 | |
| 2456610 | 1 | |
| 2455974 | 1 | |
| 2453237 | 1 | |
| 2449228 | 1 | |
| 2446368 | 1 | |
| 2438214 | 1 | |
| 2436302 | 1 | |
| 2429813 | 1 | |
| 2427748 | 1 |
| Distinct | 9983 |
|---|---|
| Distinct (%) | 99.8% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 781.4 KiB |
Length
| Max length | 23 |
|---|---|
| Median length | 23 |
| Mean length | 23 |
| Min length | 23 |
Unique
| Unique | 9966 ? |
|---|---|
| Unique (%) | 99.7% |
Sample
| 1st row | May 20, 2025 @ 21:37:28 |
|---|---|
| 2nd row | May 16, 2025 @ 20:41:05 |
| 3rd row | May 11, 2025 @ 19:48:23 |
| 4th row | May 24, 2025 @ 06:14:30 |
| 5th row | May 26, 2025 @ 13:20:09 |
| Value | Count | Frequency (%) |
| may | 10000 | |
| 2025 | 10000 | |
| 10000 | ||
| 07 | 394 | 0.8% |
| 05 | 386 | 0.8% |
| 17 | 378 | 0.8% |
| 14 | 365 | 0.7% |
| 18 | 365 | 0.7% |
| 22 | 362 | 0.7% |
| 20 | 362 | 0.7% |
| Other values (9444) | 17388 |
Most occurring characters
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32548 | |
| 0 | 24524 | |
| : | 20000 | |
| 5 | 17288 | |
| 1 | 14897 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40743 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32548 | |
| 0 | 24524 | |
| : | 20000 | |
| 5 | 17288 | |
| 1 | 14897 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40743 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32548 | |
| 0 | 24524 | |
| : | 20000 | |
| 5 | 17288 | |
| 1 | 14897 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40743 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32548 | |
| 0 | 24524 | |
| : | 20000 | |
| 5 | 17288 | |
| 1 | 14897 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40743 |
| Distinct | 9979 |
|---|---|
| Distinct (%) | 99.8% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 781.4 KiB |
Length
| Max length | 23 |
|---|---|
| Median length | 23 |
| Mean length | 23 |
| Min length | 23 |
Unique
| Unique | 9958 ? |
|---|---|
| Unique (%) | 99.6% |
Sample
| 1st row | May 20, 2025 @ 22:01:23 |
|---|---|
| 2nd row | May 16, 2025 @ 20:43:15 |
| 3rd row | May 11, 2025 @ 20:24:27 |
| 4th row | May 24, 2025 @ 06:40:59 |
| 5th row | May 26, 2025 @ 14:14:22 |
| Value | Count | Frequency (%) |
| may | 10000 | |
| 2025 | 10000 | |
| 10000 | ||
| 07 | 391 | 0.8% |
| 17 | 381 | 0.8% |
| 05 | 380 | 0.8% |
| 22 | 366 | 0.7% |
| 20 | 365 | 0.7% |
| 18 | 365 | 0.7% |
| 14 | 363 | 0.7% |
| Other values (9452) | 17389 |
Most occurring characters
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32484 | |
| 0 | 24736 | |
| : | 20000 | |
| 5 | 17103 | |
| 1 | 14879 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40798 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32484 | |
| 0 | 24736 | |
| : | 20000 | |
| 5 | 17103 | |
| 1 | 14879 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40798 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32484 | |
| 0 | 24736 | |
| : | 20000 | |
| 5 | 17103 | |
| 1 | 14879 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40798 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 230000 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 32484 | |
| 0 | 24736 | |
| : | 20000 | |
| 5 | 17103 | |
| 1 | 14879 | 6.5% |
| M | 10000 | 4.3% |
| a | 10000 | 4.3% |
| y | 10000 | 4.3% |
| @ | 10000 | 4.3% |
| Other values (7) | 40798 |
| Distinct | 9383 |
|---|---|
| Distinct (%) | 93.8% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 1.1 MiB |
Length
| Max length | 64 |
|---|---|
| Median length | 64 |
| Mean length | 58.4832 |
| Min length | 32 |
Unique
| Unique | 8931 ? |
|---|---|
| Unique (%) | 89.3% |
Sample
| 1st row | 5561e1c0a579fab5c129c76ef2995e4062566fb197ee2c934aced8f5491db1ab |
|---|---|
| 2nd row | 3c7631e0f7496bea8ee63d79d28969a4d81982030bd0914a919040c0b0f32fc1 |
| 3rd row | 445d870daa4fd41447c47a82550b17441706755f7699bfd8e70dba2f8007002e |
| 4th row | 035cfdbd8ccc19822ffe29ef0d53d8100e262ea08bddf45e524c2d5cc7184f60 |
| 5th row | 7c42e63ce655761f78d841e46c541cbb10cd79a8b2c8e4fa05537427ad316eee |
| Value | Count | Frequency (%) |
| 49b4fb56524ed18969b6f58a96cc51f2 | 6 | 0.1% |
| 627f59dd484237f42eae68c679afe678 | 6 | 0.1% |
| ef938dd97096f0cd6223901aacb94c85 | 5 | < 0.1% |
| 196019e10283118d62083e28d82f1ca7 | 5 | < 0.1% |
| fc0560a3fea454812155dbe5d60fe072 | 4 | < 0.1% |
| 05c66c94f4d8c84d302f81d0f912fc85 | 4 | < 0.1% |
| 8a1465a423cad5250285437b6f58472e | 4 | < 0.1% |
| 47269be6bb27403624f1e22e0033349c | 4 | < 0.1% |
| 8f9d4b6d2be40491e2005ed195255fa7 | 4 | < 0.1% |
| f9bbe2bb91b15fa0e4be4ae7f87d1e36 | 4 | < 0.1% |
| Other values (9373) | 9954 |
Most occurring characters
| Value | Count | Frequency (%) |
| 4 | 36906 | 6.3% |
| 2 | 36798 | 6.3% |
| 5 | 36795 | 6.3% |
| c | 36768 | 6.3% |
| b | 36760 | 6.3% |
| 0 | 36752 | 6.3% |
| 3 | 36723 | 6.3% |
| a | 36692 | 6.3% |
| 7 | 36516 | 6.2% |
| 8 | 36377 | 6.2% |
| Other values (6) | 217745 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 584832 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| 4 | 36906 | 6.3% |
| 2 | 36798 | 6.3% |
| 5 | 36795 | 6.3% |
| c | 36768 | 6.3% |
| b | 36760 | 6.3% |
| 0 | 36752 | 6.3% |
| 3 | 36723 | 6.3% |
| a | 36692 | 6.3% |
| 7 | 36516 | 6.2% |
| 8 | 36377 | 6.2% |
| Other values (6) | 217745 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 584832 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| 4 | 36906 | 6.3% |
| 2 | 36798 | 6.3% |
| 5 | 36795 | 6.3% |
| c | 36768 | 6.3% |
| b | 36760 | 6.3% |
| 0 | 36752 | 6.3% |
| 3 | 36723 | 6.3% |
| a | 36692 | 6.3% |
| 7 | 36516 | 6.2% |
| 8 | 36377 | 6.2% |
| Other values (6) | 217745 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 584832 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| 4 | 36906 | 6.3% |
| 2 | 36798 | 6.3% |
| 5 | 36795 | 6.3% |
| c | 36768 | 6.3% |
| b | 36760 | 6.3% |
| 0 | 36752 | 6.3% |
| 3 | 36723 | 6.3% |
| a | 36692 | 6.3% |
| 7 | 36516 | 6.2% |
| 8 | 36377 | 6.2% |
| Other values (6) | 217745 |
| Distinct | 9320 |
|---|---|
| Distinct (%) | 93.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 1.1 MiB |
Length
| Max length | 64 |
|---|---|
| Median length | 64 |
| Mean length | 58.0992 |
| Min length | 32 |
Unique
| Unique | 8846 ? |
|---|---|
| Unique (%) | 88.5% |
Sample
| 1st row | a068c40f0c8cdabad580b70297ad0e3d070d49403ebc0b48218b6ca6c750fe19 |
|---|---|
| 2nd row | 96e1a43126806263aa4f49243f404651731446a290778adcac5ce9e3ed0c7dda |
| 3rd row | 9cdd8b840a7d5609047e6a45f2f2e96b1cb4a6750ec5c82c9ba6b5c000a18113 |
| 4th row | 236e336691c3df827e1cef726a7a44dee65a3e86abb6855c537ef4fa186a1255 |
| 5th row | 58c48678ab5e2bfec68d3e4ef15beda80b49877796539677af9d166f99483f64 |
| Value | Count | Frequency (%) |
| bbdd815e4a7d9f30c5a36c797024007e | 7 | 0.1% |
| e244a01a9b689f4c7f4abd12679bbb1e | 6 | 0.1% |
| 788f52b065809454d6833743c0e5d54a | 5 | < 0.1% |
| 1f343516a0f4c5865255a486f638512c | 5 | < 0.1% |
| 4d425ef3e3ae3afc66c4b9205fb23054 | 5 | < 0.1% |
| 22a58adb7e2d839268ff49077745f3f4 | 5 | < 0.1% |
| f765d6641943bdb7277318d53274a92c | 5 | < 0.1% |
| 3a47275f87422abccebf3e698624da7d | 5 | < 0.1% |
| d5679ccbbf6ab8ea71c10f5f9dfdd60a | 4 | < 0.1% |
| 7f9eff4b71002024f87e6ffd356482c9 | 4 | < 0.1% |
| Other values (9310) | 9949 |
Most occurring characters
| Value | Count | Frequency (%) |
| c | 36617 | 6.3% |
| 3 | 36606 | 6.3% |
| b | 36566 | 6.3% |
| 5 | 36458 | 6.3% |
| 2 | 36418 | 6.3% |
| 9 | 36415 | 6.3% |
| e | 36394 | 6.3% |
| a | 36300 | 6.2% |
| f | 36255 | 6.2% |
| d | 36235 | 6.2% |
| Other values (6) | 216728 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 580992 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| c | 36617 | 6.3% |
| 3 | 36606 | 6.3% |
| b | 36566 | 6.3% |
| 5 | 36458 | 6.3% |
| 2 | 36418 | 6.3% |
| 9 | 36415 | 6.3% |
| e | 36394 | 6.3% |
| a | 36300 | 6.2% |
| f | 36255 | 6.2% |
| d | 36235 | 6.2% |
| Other values (6) | 216728 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 580992 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| c | 36617 | 6.3% |
| 3 | 36606 | 6.3% |
| b | 36566 | 6.3% |
| 5 | 36458 | 6.3% |
| 2 | 36418 | 6.3% |
| 9 | 36415 | 6.3% |
| e | 36394 | 6.3% |
| a | 36300 | 6.2% |
| f | 36255 | 6.2% |
| d | 36235 | 6.2% |
| Other values (6) | 216728 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 580992 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| c | 36617 | 6.3% |
| 3 | 36606 | 6.3% |
| b | 36566 | 6.3% |
| 5 | 36458 | 6.3% |
| 2 | 36418 | 6.3% |
| 9 | 36415 | 6.3% |
| e | 36394 | 6.3% |
| a | 36300 | 6.2% |
| f | 36255 | 6.2% |
| d | 36235 | 6.2% |
| Other values (6) | 216728 |
syscheck.uid_after
Real number (ℝ)
| Distinct | 6022 |
|---|---|
| Distinct (%) | 60.2% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Infinite | 0 |
| Infinite (%) | 0.0% |
| Mean | 5493.9852 |
| Minimum | 1000 |
|---|---|
| Maximum | 9999 |
| Zeros | 0 |
| Zeros (%) | 0.0% |
| Negative | 0 |
| Negative (%) | 0.0% |
| Memory size | 78.3 KiB |
Quantile statistics
| Minimum | 1000 |
|---|---|
| 5-th percentile | 1475.95 |
| Q1 | 3241.75 |
| median | 5490 |
| Q3 | 7739.25 |
| 95-th percentile | 9539 |
| Maximum | 9999 |
| Range | 8999 |
| Interquartile range (IQR) | 4497.5 |
Descriptive statistics
| Standard deviation | 2594.2622 |
|---|---|
| Coefficient of variation (CV) | 0.47220044 |
| Kurtosis | -1.2135147 |
| Mean | 5493.9852 |
| Median Absolute Deviation (MAD) | 2249 |
| Skewness | 0.017650819 |
| Sum | 54939852 |
| Variance | 6730196.5 |
| Monotonicity | Not monotonic |
Histogram with fixed size bins (bins=50)
| Value | Count | Frequency (%) |
| 9983 | 6 | 0.1% |
| 8823 | 6 | 0.1% |
| 3849 | 6 | 0.1% |
| 4171 | 6 | 0.1% |
| 2260 | 6 | 0.1% |
| 2524 | 6 | 0.1% |
| 2484 | 6 | 0.1% |
| 2749 | 6 | 0.1% |
| 1611 | 6 | 0.1% |
| 6790 | 5 | 0.1% |
| Other values (6012) | 9941 |
| Value | Count | Frequency (%) |
| 1000 | 1 | < 0.1% |
| 1002 | 1 | < 0.1% |
| 1003 | 3 | |
| 1004 | 1 | < 0.1% |
| 1005 | 1 | < 0.1% |
| 1007 | 1 | < 0.1% |
| 1008 | 1 | < 0.1% |
| 1009 | 1 | < 0.1% |
| 1012 | 1 | < 0.1% |
| 1013 | 1 | < 0.1% |
| Value | Count | Frequency (%) |
| 9999 | 1 | < 0.1% |
| 9998 | 1 | < 0.1% |
| 9997 | 1 | < 0.1% |
| 9994 | 3 | |
| 9993 | 3 | |
| 9992 | 1 | < 0.1% |
| 9991 | 2 | < 0.1% |
| 9990 | 2 | < 0.1% |
| 9987 | 3 | |
| 9983 | 6 |
syscheck.uname_after
Categorical
| Distinct | 10 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 608.4 KiB |
| User5 | |
|---|---|
| User1 | |
| Admin | |
| User3 | |
| System | |
| Other values (5) |
Length
| Max length | 7 |
|---|---|
| Median length | 5 |
| Mean length | 5.2919 |
| Min length | 5 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | User4 |
|---|---|
| 2nd row | User2 |
| 3rd row | System |
| 4th row | User4 |
| 5th row | User1 |
Common Values
| Value | Count | Frequency (%) |
| User5 | 1033 | |
| User1 | 1025 | |
| Admin | 1023 | |
| User3 | 1006 | |
| System | 1005 | |
| User6 | 1000 | |
| User4 | 994 | |
| Guest | 990 | |
| User2 | 967 | |
| Project | 957 |
Length
Histogram of lengths of the category
Common Values (Plot)
| Value | Count | Frequency (%) |
| user5 | 1033 | |
| user1 | 1025 | |
| admin | 1023 | |
| user3 | 1006 | |
| system | 1005 | |
| user6 | 1000 | |
| user4 | 994 | |
| guest | 990 | |
| user2 | 967 | |
| project | 957 |
Most occurring characters
| Value | Count | Frequency (%) |
| e | 8977 | |
| s | 8020 | |
| r | 6982 | |
| U | 6025 | |
| t | 2952 | 5.6% |
| m | 2028 | 3.8% |
| 5 | 1033 | 2.0% |
| 1 | 1025 | 1.9% |
| d | 1023 | 1.9% |
| A | 1023 | 1.9% |
| Other values (14) | 13831 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 52919 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| e | 8977 | |
| s | 8020 | |
| r | 6982 | |
| U | 6025 | |
| t | 2952 | 5.6% |
| m | 2028 | 3.8% |
| 5 | 1033 | 2.0% |
| 1 | 1025 | 1.9% |
| d | 1023 | 1.9% |
| A | 1023 | 1.9% |
| Other values (14) | 13831 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 52919 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| e | 8977 | |
| s | 8020 | |
| r | 6982 | |
| U | 6025 | |
| t | 2952 | 5.6% |
| m | 2028 | 3.8% |
| 5 | 1033 | 2.0% |
| 1 | 1025 | 1.9% |
| d | 1023 | 1.9% |
| A | 1023 | 1.9% |
| Other values (14) | 13831 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 52919 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| e | 8977 | |
| s | 8020 | |
| r | 6982 | |
| U | 6025 | |
| t | 2952 | 5.6% |
| m | 2028 | 3.8% |
| 5 | 1033 | 2.0% |
| 1 | 1025 | 1.9% |
| d | 1023 | 1.9% |
| A | 1023 | 1.9% |
| Other values (14) | 13831 |
syscheck.arch
Categorical
| Distinct | 4 |
|---|---|
| Distinct (%) | < 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 602.9 KiB |
| x86 | |
|---|---|
| AMD64 | |
| arm64 | |
| x86_64 |
Length
| Max length | 6 |
|---|---|
| Median length | 5 |
| Mean length | 4.7237 |
| Min length | 3 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | AMD64 |
|---|---|
| 2nd row | x86 |
| 3rd row | x86 |
| 4th row | x86 |
| 5th row | x86 |
Common Values
| Value | Count | Frequency (%) |
| x86 | 2592 | |
| AMD64 | 2529 | |
| arm64 | 2458 | |
| x86_64 | 2421 |
Length
Histogram of lengths of the category
Common Values (Plot)
| Value | Count | Frequency (%) |
| x86 | 2592 | |
| amd64 | 2529 | |
| arm64 | 2458 | |
| x86_64 | 2421 |
Most occurring characters
| Value | Count | Frequency (%) |
| 6 | 12421 | |
| 4 | 7408 | |
| x | 5013 | |
| 8 | 5013 | |
| A | 2529 | 5.4% |
| M | 2529 | 5.4% |
| D | 2529 | 5.4% |
| a | 2458 | 5.2% |
| r | 2458 | 5.2% |
| m | 2458 | 5.2% |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 47237 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| 6 | 12421 | |
| 4 | 7408 | |
| x | 5013 | |
| 8 | 5013 | |
| A | 2529 | 5.4% |
| M | 2529 | 5.4% |
| D | 2529 | 5.4% |
| a | 2458 | 5.2% |
| r | 2458 | 5.2% |
| m | 2458 | 5.2% |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 47237 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| 6 | 12421 | |
| 4 | 7408 | |
| x | 5013 | |
| 8 | 5013 | |
| A | 2529 | 5.4% |
| M | 2529 | 5.4% |
| D | 2529 | 5.4% |
| a | 2458 | 5.2% |
| r | 2458 | 5.2% |
| m | 2458 | 5.2% |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 47237 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| 6 | 12421 | |
| 4 | 7408 | |
| x | 5013 | |
| 8 | 5013 | |
| A | 2529 | 5.4% |
| M | 2529 | 5.4% |
| D | 2529 | 5.4% |
| a | 2458 | 5.2% |
| r | 2458 | 5.2% |
| m | 2458 | 5.2% |
agent.name
Categorical
| Distinct | 10 |
|---|---|
| Distinct (%) | 0.1% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 663.9 KiB |
| PC-GAMER | |
|---|---|
| SERVER-001 | |
| HOME-PC | |
| DESKTOP-5JEIKFF | |
| LAPTOP-1234 | |
| Other values (5) |
Length
| Max length | 15 |
|---|---|
| Median length | 13 |
| Mean length | 10.9671 |
| Min length | 7 |
Unique
| Unique | 0 ? |
|---|---|
| Unique (%) | 0.0% |
Sample
| 1st row | WIN-LAPTOP |
|---|---|
| 2nd row | DESKTOP-XYZ |
| 3rd row | WORKSTATION-01 |
| 4th row | LAPTOP-1234 |
| 5th row | DESKTOP-XYZ |
Common Values
| Value | Count | Frequency (%) |
| PC-GAMER | 1060 | |
| SERVER-001 | 1024 | |
| HOME-PC | 1015 | |
| DESKTOP-5JEIKFF | 1015 | |
| LAPTOP-1234 | 1006 | |
| DESKTOP-XYZ | 1000 | |
| DESKTOP-ALPHA | 986 | |
| SERVER-BETA | 977 | |
| WIN-LAPTOP | 962 | |
| WORKSTATION-01 | 955 |
Length
Histogram of lengths of the category
Common Values (Plot)
| Value | Count | Frequency (%) |
| pc-gamer | 1060 | |
| server-001 | 1024 | |
| home-pc | 1015 | |
| desktop-5jeikff | 1015 | |
| laptop-1234 | 1006 | |
| desktop-xyz | 1000 | |
| desktop-alpha | 986 | |
| server-beta | 977 | |
| win-laptop | 962 | |
| workstation-01 | 955 |
Most occurring characters
| Value | Count | Frequency (%) |
| E | 11070 | 10.1% |
| - | 10000 | 9.1% |
| P | 9998 | 9.1% |
| O | 7894 | 7.2% |
| T | 7856 | 7.2% |
| A | 6932 | 6.3% |
| R | 6017 | 5.5% |
| S | 5957 | 5.4% |
| K | 4971 | 4.5% |
| 0 | 3003 | 2.7% |
| Other values (21) | 35973 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 109671 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| E | 11070 | 10.1% |
| - | 10000 | 9.1% |
| P | 9998 | 9.1% |
| O | 7894 | 7.2% |
| T | 7856 | 7.2% |
| A | 6932 | 6.3% |
| R | 6017 | 5.5% |
| S | 5957 | 5.4% |
| K | 4971 | 4.5% |
| 0 | 3003 | 2.7% |
| Other values (21) | 35973 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 109671 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| E | 11070 | 10.1% |
| - | 10000 | 9.1% |
| P | 9998 | 9.1% |
| O | 7894 | 7.2% |
| T | 7856 | 7.2% |
| A | 6932 | 6.3% |
| R | 6017 | 5.5% |
| S | 5957 | 5.4% |
| K | 4971 | 4.5% |
| 0 | 3003 | 2.7% |
| Other values (21) | 35973 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 109671 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| E | 11070 | 10.1% |
| - | 10000 | 9.1% |
| P | 9998 | 9.1% |
| O | 7894 | 7.2% |
| T | 7856 | 7.2% |
| A | 6932 | 6.3% |
| R | 6017 | 5.5% |
| S | 5957 | 5.4% |
| K | 4971 | 4.5% |
| 0 | 3003 | 2.7% |
| Other values (21) | 35973 |
@timestamp
Text
| Distinct | 5697 |
|---|---|
| Distinct (%) | 57.0% |
| Missing | 0 |
| Missing (%) | 0.0% |
| Memory size | 820.4 KiB |
Length
| Max length | 27 |
|---|---|
| Median length | 27 |
| Mean length | 27 |
| Min length | 27 |
Unique
| Unique | 2859 ? |
|---|---|
| Unique (%) | 28.6% |
Sample
| 1st row | May 15, 2025 @ 06:44:44.990 |
|---|---|
| 2nd row | May 19, 2025 @ 18:25:07.043 |
| 3rd row | May 02, 2025 @ 19:13:50.756 |
| 4th row | May 28, 2025 @ 07:58:43.795 |
| 5th row | May 04, 2025 @ 21:38:31.412 |
| Value | Count | Frequency (%) |
| 2025 | 10000 | |
| 10000 | ||
| may | 9926 | |
| 14 | 391 | 0.8% |
| 25 | 380 | 0.8% |
| 15 | 371 | 0.7% |
| 16 | 358 | 0.7% |
| 31 | 358 | 0.7% |
| 07 | 351 | 0.7% |
| 03 | 350 | 0.7% |
| Other values (5722) | 17515 |
Most occurring characters
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 35551 | |
| 0 | 27384 | |
| 5 | 20203 | 7.5% |
| : | 20000 | 7.4% |
| 1 | 18193 | 6.7% |
| 3 | 11247 | 4.2% |
| 4 | 10210 | 3.8% |
| @ | 10000 | 3.7% |
| . | 10000 | 3.7% |
| Other values (11) | 67212 |
Most occurring categories
| Value | Count | Frequency (%) |
| (unknown) | 270000 |
Most frequent character per category
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 35551 | |
| 0 | 27384 | |
| 5 | 20203 | 7.5% |
| : | 20000 | 7.4% |
| 1 | 18193 | 6.7% |
| 3 | 11247 | 4.2% |
| 4 | 10210 | 3.8% |
| @ | 10000 | 3.7% |
| . | 10000 | 3.7% |
| Other values (11) | 67212 |
Most occurring scripts
| Value | Count | Frequency (%) |
| (unknown) | 270000 |
Most frequent character per script
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 35551 | |
| 0 | 27384 | |
| 5 | 20203 | 7.5% |
| : | 20000 | 7.4% |
| 1 | 18193 | 6.7% |
| 3 | 11247 | 4.2% |
| 4 | 10210 | 3.8% |
| @ | 10000 | 3.7% |
| . | 10000 | 3.7% |
| Other values (11) | 67212 |
Most occurring blocks
| Value | Count | Frequency (%) |
| (unknown) | 270000 |
Most frequent character per block
(unknown)
| Value | Count | Frequency (%) |
| 40000 | ||
| 2 | 35551 | |
| 0 | 27384 | |
| 5 | 20203 | 7.5% |
| : | 20000 | 7.4% |
| 1 | 18193 | 6.7% |
| 3 | 11247 | 4.2% |
| 4 | 10210 | 3.8% |
| @ | 10000 | 3.7% |
| . | 10000 | 3.7% |
| Other values (11) | 67212 |
Interactions
Correlations
| agent.name | syscheck.arch | syscheck.changed_attributes | syscheck.event | syscheck.size_after | syscheck.size_before | syscheck.uid_after | syscheck.uname_after | |
|---|---|---|---|---|---|---|---|---|
| agent.name | 1.000 | 0.000 | 0.004 | 0.000 | 0.018 | 0.017 | 0.008 | 0.010 |
| syscheck.arch | 0.000 | 1.000 | 0.003 | 0.009 | 0.017 | 0.000 | 0.012 | 0.000 |
| syscheck.changed_attributes | 0.004 | 0.003 | 1.000 | 0.000 | 0.000 | 0.012 | 0.018 | 0.016 |
| syscheck.event | 0.000 | 0.009 | 0.000 | 1.000 | 0.000 | 0.000 | 0.000 | 0.000 |
| syscheck.size_after | 0.018 | 0.017 | 0.000 | 0.000 | 1.000 | 0.898 | 0.017 | 0.000 |
| syscheck.size_before | 0.017 | 0.000 | 0.012 | 0.000 | 0.898 | 1.000 | 0.014 | 0.005 |
| syscheck.uid_after | 0.008 | 0.012 | 0.018 | 0.000 | 0.017 | 0.014 | 1.000 | 0.016 |
| syscheck.uname_after | 0.010 | 0.000 | 0.016 | 0.000 | 0.000 | 0.005 | 0.016 | 1.000 |
Missing values
A simple visualization of nullity by column.
Nullity matrix is a data-dense display which lets you quickly visually pick out patterns in data completion.
Sample
| syscheck.event | syscheck.path | syscheck.attrs_after | syscheck.changed_attributes | syscheck.size_before | syscheck.size_after | syscheck.mtime_before | syscheck.mtime_after | syscheck.md5_before | syscheck.md5_after | syscheck.uid_after | syscheck.uname_after | syscheck.arch | agent.name | @timestamp | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 0 | modified | E:\Data\resource.pdf | read,write,hidden,system | owner,mode | 1608666 | 2099709 | May 20, 2025 @ 21:37:28 | May 20, 2025 @ 22:01:23 | 5561e1c0a579fab5c129c76ef2995e4062566fb197ee2c934aced8f5491db1ab | a068c40f0c8cdabad580b70297ad0e3d070d49403ebc0b48218b6ca6c750fe19 | 6854 | User4 | AMD64 | WIN-LAPTOP | May 15, 2025 @ 06:44:44.990 |
| 1 | deleted | D:\Work\three.bat | exec,archive,write | mode,size | 130407 | 489904 | May 16, 2025 @ 20:41:05 | May 16, 2025 @ 20:43:15 | 3c7631e0f7496bea8ee63d79d28969a4d81982030bd0914a919040c0b0f32fc1 | 96e1a43126806263aa4f49243f404651731446a290778adcac5ce9e3ed0c7dda | 8765 | User2 | x86 | DESKTOP-XYZ | May 19, 2025 @ 18:25:07.043 |
| 2 | deleted | C:\Users\Project\Documents\success.jpg | archive,read | group | 218982 | 487333 | May 11, 2025 @ 19:48:23 | May 11, 2025 @ 20:24:27 | 445d870daa4fd41447c47a82550b17441706755f7699bfd8e70dba2f8007002e | 9cdd8b840a7d5609047e6a45f2f2e96b1cb4a6750ec5c82c9ba6b5c000a18113 | 1104 | System | x86 | WORKSTATION-01 | May 02, 2025 @ 19:13:50.756 |
| 3 | added | D:\Work\career.dll | hidden,archive | mtime | 1472569 | 1050226 | May 24, 2025 @ 06:14:30 | May 24, 2025 @ 06:40:59 | 035cfdbd8ccc19822ffe29ef0d53d8100e262ea08bddf45e524c2d5cc7184f60 | 236e336691c3df827e1cef726a7a44dee65a3e86abb6855c537ef4fa186a1255 | 1661 | User4 | x86 | LAPTOP-1234 | May 28, 2025 @ 07:58:43.795 |
| 4 | modified | C:\Windows\Temp\field.bat | system,read,hidden | mode | 916006 | 725192 | May 26, 2025 @ 13:20:09 | May 26, 2025 @ 14:14:22 | 7c42e63ce655761f78d841e46c541cbb10cd79a8b2c8e4fa05537427ad316eee | 58c48678ab5e2bfec68d3e4ef15beda80b49877796539677af9d166f99483f64 | 5993 | User1 | x86 | DESKTOP-XYZ | May 04, 2025 @ 21:38:31.412 |
| 5 | modified | C:\Users\User2\Desktop\tough.zip | archive,exec,hidden | size,group | 297462 | 715887 | May 10, 2025 @ 10:14:17 | May 10, 2025 @ 10:17:10 | 6575939643b2e963735f4a92ce793cdee1c401b9b3a3109a441b25f396543041 | e6a47d6d265ec42036bec9b0b6585bc15261ba20a340759397c686a250ee63ee | 4439 | Project | x86 | LAPTOP-1234 | May 30, 2025 @ 10:41:19.066 |
| 6 | deleted | C:\Windows\Temp\war.dll | archive,hidden,system,read | group | 1486500 | 988872 | May 13, 2025 @ 05:44:48 | May 13, 2025 @ 05:45:47 | a0a9141f79f4cae63fb7ccd4016a8896 | 7c6eb11e715421f183db9e9b1912d94d4f60e5e78ed4992e586fa8d4cfb24a6f | 1449 | Admin | x86_64 | DESKTOP-ALPHA | May 14, 2025 @ 04:03:06.951 |
| 7 | deleted | C:\Users\Project\Documents\significant.dll | system,hidden,archive,read | size,mode | 1328215 | 1062382 | May 22, 2025 @ 16:50:37 | May 22, 2025 @ 16:56:35 | 36dbf41e72e21fc2d674102ed1310a588697554b006ab539982469bebeb1d912 | cfef33b93ba3ec1f788802a30efbeb87 | 3063 | User4 | AMD64 | LAPTOP-1234 | May 31, 2025 @ 21:57:04.124 |
| 8 | added | C:\Windows\Temp\guess.pdf | system,read | mtime | 740819 | 940744 | May 18, 2025 @ 18:05:11 | May 18, 2025 @ 19:00:12 | 35dfc63318e3e621ab9dbacf5378498cb95c88a498d329c89b2f4f1aa7612490 | 6107b4660b3c65ff1303581c0b38e59c3a36bda0892d6304df7b5b4805778ea4 | 5573 | Admin | arm64 | DESKTOP-ALPHA | Jun 01, 2025 @ 05:51:26.336 |
| 9 | modified | E:\Data\white.docx | exec,archive,hidden,write | owner,mtime | 252526 | 1 | May 07, 2025 @ 22:04:07 | May 07, 2025 @ 22:41:57 | 36aef7ae846389f9fb9d7ef02a783c8a3ce6439fbafbc8b0ef6d00c8041faffb | 62c99ab36c7970d21b2a3339b41061fdab6a08c8299c22c7b810abe53c1ad27b | 8643 | User1 | x86 | PC-GAMER | May 04, 2025 @ 09:41:23.240 |
| syscheck.event | syscheck.path | syscheck.attrs_after | syscheck.changed_attributes | syscheck.size_before | syscheck.size_after | syscheck.mtime_before | syscheck.mtime_after | syscheck.md5_before | syscheck.md5_after | syscheck.uid_after | syscheck.uname_after | syscheck.arch | agent.name | @timestamp | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 9990 | modified | C:\Users\Project\Documents\scene.txt | exec,archive,hidden | mtime,group | 629826 | 392419 | May 03, 2025 @ 11:14:40 | May 03, 2025 @ 11:40:53 | b1000cfdb24c5b900706c006bcce0a34b98c879b45fbc00424603e59af1f41c8 | 7e51e6841c766ecfcc17839fc7916b519edf3215b9e1fad3803f33d46de22d47 | 4155 | Admin | AMD64 | DESKTOP-ALPHA | May 13, 2025 @ 03:19:29.801 |
| 9991 | deleted | C:\Windows\System32\help.txt | system,read,archive,hidden | mode,size | 195794 | 25429 | May 03, 2025 @ 01:31:21 | May 03, 2025 @ 02:15:08 | 0b4e36e6579cfc2f95f8991eff48c35adc6b4ae539edbeb326498fcbec795b5d | 5d9af838090bb7789127d8077babd7948bdd39dd6cf1472975df1393b74a28d2 | 1698 | User2 | x86 | DESKTOP-XYZ | May 22, 2025 @ 00:56:31.906 |
| 9992 | added | C:\Users\User1\Downloads\available.exe | exec,write,read | owner,mtime | 1205320 | 1335478 | May 18, 2025 @ 23:00:29 | May 18, 2025 @ 23:27:00 | 93a2f1d1ef05c338d14b0ecf16f323dbfe8d32f5ee369f768cbc6a19bdd6c318 | 62aaa7f1e6f3034f72689a4c30115535 | 4563 | Admin | AMD64 | SERVER-BETA | May 11, 2025 @ 19:16:54.912 |
| 9993 | modified | D:\Work\control.dll | system,hidden,exec,archive | group,size | 1914888 | 1976907 | May 12, 2025 @ 15:28:57 | May 12, 2025 @ 15:30:18 | 9ad3cfc2ab9698ee7a21682dc1119451ae67606512d3d92fd9a5eae594cc065b | 46fc34aa07a0e1cce28ab6d08f983b5cf5643dc320046d64967dee158b7e7c66 | 5604 | Project | x86_64 | WIN-LAPTOP | May 29, 2025 @ 07:39:08.584 |
| 9994 | deleted | C:\Users\Guest\Documents\small.txt | read,system | size,group | 486724 | 301735 | May 07, 2025 @ 20:11:46 | May 07, 2025 @ 20:15:38 | 98873efb21e9d8b9450880e561cc67890b6d3791b51f64c8f3203e75a249b036 | 89d5e60d574ff26ed99bc30e62fb1825 | 7841 | Project | arm64 | LAPTOP-1234 | May 27, 2025 @ 21:51:15.498 |
| 9995 | modified | E:\Data\watch.dll | exec,system,write,hidden | group,owner | 313378 | 94002 | May 03, 2025 @ 16:38:04 | May 03, 2025 @ 17:20:31 | fdcb657c6ca01aced07a7e488f14f78087cecda432829303ba4ed55aad1b247e | a065ec2185b6f9d542a9c2baafe224c0b649c7843ef97ae5881f4a5ccc80cc15 | 4147 | User2 | AMD64 | SERVER-BETA | May 21, 2025 @ 10:33:15.221 |
| 9996 | added | C:\Windows\Temp\people.exe | read,exec,system,hidden | group | 1637166 | 1564962 | May 21, 2025 @ 20:41:11 | May 21, 2025 @ 20:44:57 | 08195a877795169d106ba45b3a818b229736dce896a69c65ec76aebc347a216d | 8fd107232013d0ce39d2832ac16e60ff6e4f3e669f3fbbc00df90282b4700949 | 4136 | User2 | x86 | WIN-LAPTOP | May 31, 2025 @ 12:17:16.159 |
| 9997 | deleted | C:\Users\User2\Desktop\hospital.dll | system,read,hidden | group | 1578559 | 1737606 | May 06, 2025 @ 13:52:14 | May 06, 2025 @ 14:18:31 | 4dda1447c5cfad0023c6fbf0d8f65e7c79cb553c0e27c7882c0310c8841ca67d | 8e4f6f67035aabaf77ad259add9e33e69c8ae0896c36bc4bf21f097bc60cce41 | 7374 | User5 | x86_64 | SERVER-001 | May 15, 2025 @ 02:13:23.385 |
| 9998 | added | C:\Users\Project\Documents\community.docx | system,read,hidden,archive | size,mode | 775285 | 487456 | May 30, 2025 @ 11:47:20 | May 30, 2025 @ 12:42:25 | 9646a70c9d46ef5ca33cb12c608a18dbd5b182f811ba39c14f910490ad6fd35a | c3898bd8f2f315606b5ab989cdc4af351e7072d04687ddc377a007146b1fe6fa | 2504 | User2 | x86 | LAPTOP-1234 | May 09, 2025 @ 00:14:35.391 |
| 9999 | added | E:\Data\western.dll | exec,system | mtime,group | 839680 | 380902 | May 07, 2025 @ 19:18:10 | May 07, 2025 @ 20:00:51 | f282ec7c291eb4fde6cfddb8ad5d0ef7930bd4cbd3a710ef50b265ca17ded292 | fd0a0cb373767df8cd734af56f7cf90e | 3948 | Guest | x86 | SERVER-BETA | May 17, 2025 @ 01:07:55.216 |